DataSunrise Database Firewall for Cloudberry Database
Cloudberry firewall by DataSunrise ensures database security against external and internal threats. It inspects incoming SQL queries and blocks those of them that are defined as prohibited ones. Security policies control users’ privileged access.
Cloudberry Firewall by DataSunrise is a powerful tool for protection. With non-stop database monitoring, processing incoming queries and database responses, and analyzing database activity it provides comprehensive protection for data and databases from threats.
The firewall is deployed as a proxy. Residing between the database and clients the firewall audits and controls traffic intercepting packets with malicious code.
DataSunrise Firewall for Cloudberry provides a deep traffic inspection that guarantees a high level of security against various types of intrusion. DataSunrise blocks fundamental SQL injection techniques, including union-based exploitation, boolean-based exploitation, out-of-band exploitation, and more.
The Firewall has the learning mode. It analyzes incoming SQL traffic and forms a list of the typical queries for a given environment. These queries are assumed to be safe and, therefore, are permitted. Everything else is blocked.
DataSunrise Database Firewall can function as an authentication proxy thanks to Kerberos protocol support. You can configure user mapping and only users included in the Active Directory domain can access the databases with sensitive information.
